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During manufacture, generate 
endorsement key pairs; store in TPM 
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Read public key portion and store in 
external database 
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When Endorsement Certificate is 
needed send public key from TPM to 
external database int. 



44 




No 




-M End 



Generate Endorsement Certificate 
using public key, 
if desired sign with signing key 
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Download Endorsement Certificate 
to customer 
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Fig. 2 



